QUESTION 42You administer an Azure Active Directory (Azure AD) tenant where Box is configured for:- Application Access- Password Single Sign-onAn employee moves to an organizational unit that does not require access to Box through the Access Panel.You need to remove only Box from the list of applications only for this user.What should you do?

A. Delete the user from the Azure AD tenant.B. Delete the Box Application definition from the Azure AD tenant.C. From the Management Portal, remove the user's assignment to the application.D. Disable the user's account in Windows AD.

QUESTION 43You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web application named TeamSite1. TeamSite1 accesses your Azure AD tenant for user information.The application access key for TeamSite1 has been compromised.You need to ensure that users can continue to use TeamSite1 and that the compromised key does not allow access to the data in your Azure AD tenant.Which two actions should you perform? Each correct answer presents part of the solution.

A. Remove the compromised key from the application definition for TeamSite1.B. Delete the application definition for TeamSite1.C. Generate a new application key for TeamSite1.D. Generate a new application definition for TeamSite1.E. Update the existing application key.

Answer: ACExplanation: One of the security aspects of Windows Azure storage is that all access is protected by access keys.It is possible to change the access keys (e.g. if the keys become compromised), and if changed, we'd need to update the application to have the new key.

QUESTION 44You administer a DirSync server configured with Azure Active Directory (Azure AD).You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval.What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

A. Restart the DirSync server.B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet.C. Run the Enable-SyncShare PowerShell cmdlet.D. Run the Azure AD Sync tool Configuration Wizard.E. Replicate the Directory in Active Directory Sites and Services.

Answer: BDExplanation: If you don't want to wait for the recurring synchronizations that occur every three hours, you can force directory synchronization at any time.B: Force directory synchronization using Windows PowerShellYou can use the directory synchronization Windows PowerShell cmdlet to force synchronization. The cmdlet is installed when you install the Directory Sync tool. On the computer that is running the Directory Sync tool, start PowerShell, type Import- Module DirSync, and then press ENTER.Type Start-OnlineCoexistenceSync, and then press ENTER.D: Azure Active Directory Sync Services (AAD Sync) In September 2014 the Microsoft Azure AD Sync tool was released. This changed how manual sync requests are issued.To perform a manual update we now use the DirectorySyncClientCmd.exe tool. The Delta and Initial parameters are added to the command to specify the relevant task.This tool is located in:C:Program FilesMicrosoft Azure AD SyncBinYou can use the directory synchronization Windows PowerShell cmdlet to force synchronization. The cmdlet is installed when you install the Directory Sync tool. On the computer that is running the Directory Sync tool, start PowerShell, type Import- Module DirSync, and then press ENTER.Type Start-OnlineCoexistenceSync, and then press ENTER.

QUESTION 45Hotspot QuestionYou manage an Internet Information Services (IIS) 6 website named contososite1. Contososite1 runs a legacy ASP.NET 1.1 application named LegacyApp1. LegacyApp1 does not contain any integration with any other systems or programming languages.You deploy contososite1 to Azure Web Sites.You need to configure Azure Web Sites. You have the following requirements:- LegacyApp1 runs correctly.- The application pool does not recycle.Which settings should you configure to meet the requirements? To answer, select the appropriate settings in the answer area.Answer: Explanatio:http://msdn.microsoft.com/en-us/library/k6h9cz8h%28v=vs.140%29.aspx

QUESTION 46Drag and Drop QuestionYour company manages several Azure Web Sites that are running in an existing web- hosting plan named plan1.You need to move one of the websites, named contoso, to a new web-hosting plan named plan2.Which Azure PowerShell cmdlet should you use with each PowerShell command line? To answer, drag the appropriate Azure PowerShell cmdlet to the correct location in the PowerShell code. Each PowerShell cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Answer:

QUESTION 47You administer an Azure Web Site named contosoweb that is used to sell various products.Contosoweb experiences heavy traffic during weekends.You need to analyze the response time of the product catalog page during peak times, from different locations.What should you do?

Answer: AExplanation:Endpoint monitoring configures web tests from geo-distributed locations that test response time and uptime of web URLs. The test performs an HTTP get operation on the web URL to determine the response time and uptime from each location. Each configured location runs a test every five minutes. After you configure endpoint monitoring, you can drill down into the individual endpoints to view details response time and uptime status over the monitoring interval from each of the test locationhttp://azure.microsoft.com/en-us/documentation/articles/web-sites-monitor/#webendpointstatus